Change Remote Connection Settings
Applies To: Windows Server 2008
You can use the following procedure to change the remote connection settings on a terminal server.
On the Remote tab in the System Properties dialog box on the terminal server you can change the following remote connection settings:
Network Level Authentication requirement for Remote Desktop connections
Membership of the Remote Desktop Users group
Membership in the local Administrators group, or equivalent, on the terminal server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).
To change remote connections settings
Start the System tool. To start the System tool, click Start, click Run, type control system and then click OK.
Under Tasks, click Remote settings.
In the System Properties dialog box, on the Remote tab, click either of the following, depending on your environment:
Allow connections from computers running any version of Remote Desktop (less secure)
Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)
For more information about the two options, click the Help me choose link on the Remote tab.
On the Remote tab, if you select Don't allow connections to this computer, no users will be able to connect remotely to this computer, even if they are members of the Remote Desktop Users group.
Click Select Users to add the users and groups that need to connect to the computer by using Remote Desktop. The users and groups that you add are added to the Remote Desktop Users group.
Members of the local Administrators group can connect even if they are not listed.